EUVD-2005-1300

Malware in sbrugna...

CVE-2005-1295

Technical details (affected products, precise root cause, affected versions, and exploitability) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2005-1297

Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1297

CVE-2005-1297 concerns a cross-site scripting (XSS) vulnerability in the include.cgi script that allows remote attackers to inject arbitrary web script or HTML via the argument. Affected component: include.cgi. Root cause: insufficient input sanitization in include.cgi leading to script injection...

CVE-2005-1296

The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...

remote command execution in include.cgi script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN include.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

CVE-2005-1296

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument...

CVE-2005-1297

Cross-site scripting XSS vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument...

CVE-2005-1295

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument...